Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
File:                     nnld0BGVNBRxXMaHXf05xh5Rgcg.mft (raw, json)
Hash identifier:          QD5jHaOLDdZ2e1vjFsK4rBZGY1ajJKruujsob/Qy8+4=
Subject key identifier:   2A:E2:39:FC:99:22:55:88:7D:B7:F9:F7:E3:23:82:27:EC:56:80:2B
Authority key identifier: 9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
Certificate issuer:       /CN=9e795dd011953414715cc6875dfd39c61e5181c8
Certificate serial:       019FA82B2A389B7AF2640B43D9D631FE53AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
Manifest number:          0132
Signing time:             Tue 28 Jul 2026 10:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:28 +0000
Files and hashes:         1: 0ukpVUSxlWUjEn8_3Xhh5EdLxE4.asa (hash: j4wQB6gt1Z/UKS98HN0+WjuxJxJyXB/YyRal6d7AqSk=)
                          2: 1zwO-pRpLQjpKdc2fMnL99i_j-Y.roa (hash: SYfKKB6gtn0cNSUNi0rlTL24CWOzIm0TRFFugkUSGaY=)
                          3: ZGnoRW5cVvJJj2NLujSWP8-p4ME.roa (hash: SVrmw2kPu3uWDYtUFMQIl+Wr3E0Z77xS+MusJocEbUE=)
                          4: nnld0BGVNBRxXMaHXf05xh5Rgcg.crl (hash: p8rnYMnnnT8oC5TLtth2eS3N0uPcWvx12ZExoVNKAOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:2a:38:9b:7a:f2:64:0b:43:d9:d6:31:fe:53:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e795dd011953414715cc6875dfd39c61e5181c8
        Validity
            Not Before: Jul 28 10:00:28 2026 GMT
            Not After : Jul 29 10:00:28 2026 GMT
        Subject: CN=2ae239fc992255887db7f9f7e3238227ec56802b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:a7:80:3b:6e:c0:12:3d:9f:be:45:5a:95:
                    80:8c:9b:05:89:17:0e:9e:41:e9:fa:7e:30:33:4c:
                    ce:ac:76:c5:1c:cd:04:cf:6e:61:f8:fc:31:49:06:
                    84:5e:3a:6a:70:7b:10:5d:3c:15:36:fc:70:4b:68:
                    71:db:03:42:5d:ee:62:e2:97:ed:d2:b1:23:d1:cd:
                    c6:5e:1a:05:1f:b5:39:cf:0e:6f:ea:b2:dd:7a:95:
                    3a:28:40:74:17:94:5c:57:94:8c:8f:ee:05:d3:27:
                    bc:c8:eb:a7:0d:5a:ce:92:c0:6e:e4:c9:8a:32:f4:
                    d4:78:19:6d:16:83:14:27:3b:02:1e:18:b6:85:e8:
                    cf:04:8d:d7:80:5c:1f:d9:fa:ee:be:23:42:2f:91:
                    22:38:a1:73:12:89:28:72:a5:06:c4:53:76:93:bb:
                    6d:c0:ee:82:9e:06:c2:03:f4:b2:1e:75:f2:81:a3:
                    da:41:42:a9:df:ed:cd:55:86:b8:4e:67:50:c6:72:
                    9f:5e:4c:e4:20:86:56:fe:ce:ba:f8:25:33:a7:8d:
                    5a:9a:38:7c:25:50:a8:ff:a3:d8:39:b3:a3:ad:fe:
                    58:70:53:31:cb:9e:58:cf:b2:44:7e:9d:94:32:82:
                    22:26:19:0e:7b:76:da:e7:47:ab:bb:ca:6c:f6:1a:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E2:39:FC:99:22:55:88:7D:B7:F9:F7:E3:23:82:27:EC:56:80:2B
            X509v3 Authority Key Identifier:
                keyid:9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:90:aa:f3:a4:b7:ac:d0:63:34:3b:ce:51:58:3f:7d:48:9f:
         e5:a6:56:ea:67:7d:f2:9b:76:f2:f3:c0:5c:91:b4:a3:ad:d3:
         c6:90:2c:e8:00:8b:43:76:46:aa:fc:0c:0e:87:32:04:9d:cd:
         06:a4:30:92:b0:5e:72:79:1a:bf:84:e3:55:ef:55:06:97:29:
         95:5f:71:c2:4b:69:a8:9a:39:cf:e1:92:dd:d5:7d:68:7a:c3:
         c6:5a:06:19:28:ea:c7:4e:cf:8c:8a:8b:b0:d3:de:17:2b:88:
         4d:ba:48:50:23:9d:24:a9:7d:06:4a:85:50:2d:2b:59:03:63:
         3b:1b:11:68:0f:c7:c0:a3:9e:20:3d:25:10:07:f7:5a:8c:9a:
         e4:83:c2:84:d1:06:5c:d9:3c:f5:1d:4d:31:b2:ac:71:93:bc:
         44:00:1e:ac:42:1e:0e:2f:26:eb:8a:39:24:5a:7b:30:dd:ff:
         34:ff:47:ed:28:02:50:31:a1:72:8a:ea:5e:70:b3:af:43:ac:
         c8:c1:19:61:3f:dd:cc:ce:89:f9:f5:e5:f4:79:9b:31:84:96:
         e7:52:1b:29:68:69:1f:07:67:5e:ea:32:33:e6:e2:86:08:c7:
         0f:a2:78:d1:90:e5:5f:45:03:f9:52:49:26:6c:c2:82:79:ef:
         c3:94:18:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oKyo4m3ryZAtD2dYx/lOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzk1ZGQwMTE5NTM0MTQ3MTVjYzY4NzVkZmQzOWM2MWU1
MTgxYzgwHhcNMjYwNzI4MTAwMDI4WhcNMjYwNzI5MTAwMDI4WjAzMTEwLwYDVQQD
EygyYWUyMzlmYzk5MjI1NTg4N2RiN2Y5ZjdlMzIzODIyN2VjNTY4MDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ingDtuwBI9n75FWpWAjJsFiRcO
nkHp+n4wM0zOrHbFHM0Ez25h+PwxSQaEXjpqcHsQXTwVNvxwS2hx2wNCXe5i4pft
0rEj0c3GXhoFH7U5zw5v6rLdepU6KEB0F5RcV5SMj+4F0ye8yOunDVrOksBu5MmK
MvTUeBltFoMUJzsCHhi2hejPBI3XgFwf2fruviNCL5EiOKFzEokocqUGxFN2k7tt
wO6CngbCA/SyHnXygaPaQUKp3+3NVYa4TmdQxnKfXkzkIIZW/s66+CUzp41amjh8
JVCo/6PYObOjrf5YcFMxy55Yz7JEfp2UMoIiJhkOe3ba50eru8ps9hqDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCriOfyZIlWIfbf59+MjgifsVoArMB8GA1UdIwQY
MBaAFJ55XdARlTQUcVzGh139OcYeUYHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5sZDBCR1ZOQlJ4WE1hSFhmMDV4aDVSZ2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kZjJlNjAtNWIwZi00OTYwLWI5Y2Qt
NTVhMzU0N2FiYmQ2LzEvbm5sZDBCR1ZOQlJ4WE1hSFhmMDV4aDVSZ2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kZjJlNjAtNWIwZi00OTYwLWI5Y2QtNTVhMzU0N2FiYmQ2
LzEvbm5sZDBCR1ZOQlJ4WE1hSFhmMDV4aDVSZ2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZCq86S3
rNBjNDvOUVg/fUif5aZW6md98pt28vPAXJG0o63TxpAs6ACLQ3ZGqvwMDocyBJ3N
BqQwkrBecnkav4TjVe9VBpcplV9xwktpqJo5z+GS3dV9aHrDxloGGSjqx07PjIqL
sNPeFyuITbpIUCOdJKl9BkqFUC0rWQNjOxsRaA/HwKOeID0lEAf3Woya5IPChNEG
XNk89R1NMbKscZO8RAAerEIeDi8m64o5JFp7MN3/NP9H7SgCUDGhcorqXnCzr0Os
yMEZYT/dzM6J+fXl9HmbMYSW51IbKWhpHwdnXuoyM+bihgjHD6J40ZDlX0UD+VJJ
JmzCgnnvw5QYEw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:18 2026 by rpki-client